Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/8025e54b031398d92c6fc536897f954d8b6bc303.roa
File:                     8025e54b031398d92c6fc536897f954d8b6bc303.roa (raw, json)
Hash identifier:          SFW5YXTD/gjYfPRtSmKkFBmIvUSvQC10Zi4yfRU7rX8=
Subject key identifier:   BC:E5:AD:72:31:10:AC:E0:66:B7:63:E0:6D:B9:FB:66:DF:95:8C:CE
Certificate issuer:       /CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
Certificate serial:       10FE2D
Authority key identifier: 70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/8025e54b031398d92c6fc536897f954d8b6bc303.roa
Signing time:             Fri 29 Oct 2021 18:12:55 +0000
ROA not before:           Fri 29 Oct 2021 03:00:00 +0000
ROA not after:            Fri 31 Oct 2025 03:00:00 +0000
asID:                     267829
IP address blocks:        45.174.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1113645 (0x10fe2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca9ba10afd54135352807b3dddedf3c53d15f16
        Validity
            Not Before: Oct 29 03:00:00 2021 GMT
            Not After : Oct 31 03:00:00 2025 GMT
        Subject: CN=8025e54b031398d92c6fc536897f954d8b6bc303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6c:21:33:19:d7:2c:93:37:e4:39:ce:23:bd:
                    c9:f5:3f:7a:36:a0:ab:ab:c9:74:52:1e:90:7a:0a:
                    c0:d6:fa:a5:75:be:5a:a9:0a:db:da:f0:3e:a5:1b:
                    b0:ca:a0:8a:a2:87:a4:b7:78:3a:d1:6f:fd:b4:b8:
                    7c:54:84:c2:a6:56:c0:6f:1c:63:f0:9b:18:65:0a:
                    52:8a:42:d5:d2:be:40:e8:84:7a:2f:c9:95:7b:81:
                    68:b6:e7:42:71:29:0f:38:54:c4:23:c3:b7:99:69:
                    1b:92:13:8c:79:e4:da:7b:37:e5:1c:a6:b3:9a:4a:
                    db:57:6c:63:df:35:49:60:dd:18:7f:4f:95:c7:c2:
                    2c:8e:c3:3d:c6:84:58:42:e9:eb:6e:2f:7f:39:99:
                    bf:06:fe:11:fc:35:b4:f1:31:28:d1:10:7c:10:98:
                    e4:65:4a:59:0d:ec:89:a2:6a:6b:ac:1e:6b:84:ad:
                    92:64:d7:5d:27:e7:01:95:2a:1f:fc:c6:3c:22:34:
                    19:5e:0a:1e:08:33:32:b9:09:c2:88:bf:53:bd:bb:
                    a4:c0:15:22:0b:1f:95:6b:4a:d7:e0:56:9b:6b:b0:
                    61:c4:d2:b3:5d:ef:26:30:21:a5:d3:b8:ef:4c:bf:
                    22:47:0a:26:5a:c9:2d:56:43:f4:ef:4c:41:4e:26:
                    12:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E5:AD:72:31:10:AC:E0:66:B7:63:E0:6D:B9:FB:66:DF:95:8C:CE
            X509v3 Authority Key Identifier:
                keyid:70:FE:31:A0:4C:7D:2D:19:E4:8E:29:0F:60:F7:17:9D:F1:BD:7F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ca9ba10afd54135352807b3dddedf3c53d15f16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/8025e54b031398d92c6fc536897f954d8b6bc303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7790c47-cf8a-44c5-9515-7ed8414b2dd0/6ca9ba10afd54135352807b3dddedf3c53d15f16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:e5:68:ad:7a:03:a1:69:bd:59:0a:30:fd:7e:10:61:5b:07:
         15:1c:74:36:04:36:d6:72:71:c8:ff:fb:17:31:6f:91:68:ae:
         59:97:f7:d0:b5:f5:90:0b:f5:9b:41:5f:f3:a5:88:64:3f:43:
         8d:34:40:a2:d0:9e:b0:87:3a:e6:ef:20:bd:fe:61:63:d4:46:
         0c:13:7a:78:87:2a:16:e3:1f:55:3c:47:fb:82:70:62:f3:b0:
         fa:e8:6d:0f:01:c0:6e:7a:93:fa:e5:e3:7f:7c:e5:84:b3:bf:
         9e:86:e9:97:52:d3:8a:e8:a4:02:df:3b:57:4c:05:63:ab:98:
         ec:05:b4:25:63:90:93:b3:21:51:6e:8a:bf:26:90:a0:d3:9e:
         f9:5d:80:46:18:63:e3:18:55:20:c8:9b:a9:92:c3:e6:1a:87:
         97:4b:77:45:b2:bd:3b:81:49:7d:b4:77:4c:19:f3:49:f3:10:
         65:b1:d4:46:cb:95:3a:c2:a5:d5:ab:f5:e6:8d:e0:29:94:9f:
         80:ad:4f:c6:28:95:82:e4:98:c2:1c:70:b1:3c:68:18:6c:8f:
         9f:4e:d8:e9:36:44:66:25:b9:07:5f:84:b8:3e:8d:19:09:79:
         11:1d:f3:b3:31:07:c8:cf:82:4f:2c:9a:00:19:54:09:2b:5c:
         96:1a:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----